library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-toolset | May 4, 2022 | Aug 7, 2021 |
| Alpine Linux | — | Upgrade rust | Mar 26, 2024 | Aug 7, 2021 |
| Centos_linux | — | Upgrade rust-debuginfoUpgrade rust-analysisUpgrade rust-debugsourceUpgrade rls-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-lldbUpgrade rustfmtUpgrade rust-srcUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rust-docUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rlsUpgrade clippyUpgrade rust-gdbUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade cargoUpgrade clippy-debuginfoUpgrade rustUpgrade rust-toolset | Nov 10, 2021 | Aug 7, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Aug 7, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Aug 7, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Aug 7, 2021 |
| Oracle_linux | — | Upgrade rust-toolsetUpgrade rust-analysisUpgrade rust-lldbUpgrade rust-srcUpgrade rust-gdbUpgrade cargoUpgrade cargo-docUpgrade rustfmtUpgrade rust-docUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rlsUpgrade clippyUpgrade rust-std-staticUpgrade rustUpgrade rust-debugger-common | Nov 17, 2021 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade clippyUpgrade rust-lldbUpgrade cargoUpgrade rust-std-staticUpgrade rust-docUpgrade rust-analysisUpgrade rustfmtUpgrade cargo-docUpgrade rustfmt-debuginfoUpgrade rust-debugger-commonUpgrade rust-debugsourceUpgrade rust-debuginfoUpgrade rustUpgrade rust-srcUpgrade clippy-debuginfoUpgrade rlsUpgrade rls-debuginfoUpgrade rust-toolsetUpgrade rust-gdbUpgrade rust-std-static-wasm32-unknown-unknownUpgrade cargo-debuginfo | Nov 10, 2021 | Aug 7, 2021 |
| Rocky_linux | — | Upgrade clippyUpgrade rust-analysisUpgrade rustUpgrade rustfmt-debuginfoUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade clippy-debuginfoUpgrade rlsUpgrade cargoUpgrade rust-docUpgrade rustfmtUpgrade cargo-debuginfoUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rust-toolset | Mar 12, 2024 | Aug 7, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Aug 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub